Official Document — Last Updated: January 2026

Pop88 Privacy Policy — How We Protect Your Personal Data

At pop88, privacy isn't fine-print formality — it's a responsibility we take seriously every day. This Policy clearly explains what data we collect, why we collect it, how we use it, and how you can exercise your rights over your data, in accordance with the LGPD.

+18 | Brazilian residents only | pop88.best

What This Policy Covers

  • Data we collect
  • How we use your data
  • Third-party sharing
  • Cookies and tracking
  • Security & Encryption
  • Your Rights Under the LGPD
  • Data retention and deletion
Jan 2026 Last Updated
SSL 256 Active Encryption
LGPD Full Compliance
24h PT-BR Support
Last updated: January 15, 2026 — pop88.best

Summary: pop88 collects only the data necessary to operate the platform securely. We do not sell or rent your data to third parties. You have full control over your information and can exercise your LGPD rights at any time by emailing privacidade@pop88.best.

1Introduction and Controller Identification

This Privacy Policy describes how pop88, accessible at pop88.best ("Platform", "we", "Company"), collects, uses, stores, shares, and protects the personal information of users who register and use the sports betting, online casino, and related services.

Pop88 acts as data controller pursuant to the Brazilian General Data Protection Law (LGPD — Federal Law No. 13,709/2018), and is responsible for decisions regarding the processing of users' personal information on the Platform.

By creating an account on pop88 or using any service on the Platform, you acknowledge that you have read this Privacy Policy and agree to the processing of your personal data as described herein. If you disagree with any part of this Policy, do not create an account. If you already have an account and disagree with an update, please contact our privacy team before continuing to use the Platform.

This Policy applies to all pop88 channels: website, mobile app, email communications, and any other point of contact between you and the Platform.

2What Personal Data We Collect

Pop88 collects personal data at different points during your interaction with the Platform. Below are the categories of data collected and when they are collected:

Data provided directly by you:

  • Registration data: full name, CPF, date of birth, email address, mobile number and full residential address including ZIP code;
  • Verification documents: copies of a national ID, driver's license, or passport and proof of address, requested during the KYC (identity verification) process;
  • Financial data: Pix key, bank details for wire transfers, credit or debit card information processed by the payment gateway — the full card number is never stored on pop88's servers;
  • Communications: content of messages exchanged with support via email or chat.

Data collected automatically during your use of the Platform:

  • Usage data: betting history, games accessed, promotions activated, casino sessions, deposits and withdrawals made;
  • Technical data: IP address, browser or app type and version, operating system, device identifier, screen resolution, and time zone;
  • Approximate location data: inferred from IP address for geographic compliance purposes — pop88 does not request access to your device's precise location;
  • Cookies and similar technologies: detailed in section 6 of this Policy.

Data minimization principle: pop88 collects only the data strictly necessary to operate the Platform, meet legal obligations, and deliver a personalized, secure experience. We do not collect sensitive data such as racial origin, religious beliefs, or health information.

3How and Why We Use Your Data

The personal data collected by pop88 is used exclusively for the following purposes:

  • Account creation and management: verify your identity, create your user profile, process your registration, and keep your account information up to date;
  • Service provision: process sports bets, make casino games available, apply bonuses and promotions, and calculate and process withdrawals via Pix and other payment methods;
  • Identity verification and fraud prevention: confirm that the account holder is who they claim to be, prevent misuse of the Platform, detect suspicious activity and comply with anti-money laundering obligations (AML/CFT);
  • User support: answering questions, resolving issues with withdrawals or bets, handling complaints, and providing personalized customer support in Brazilian Portuguese;
  • Operational communications: send transactional emails about your account activity — deposit confirmations, withdrawal notifications, security alerts, and Terms or Policy updates;
  • Promotional communications: send offers, promotions, and pop88 news, only with your express consent, which may be withdrawn at any time;
  • Platform Improvement: analyze usage patterns in aggregated, anonymized form to identify technical issues, improve the user experience, and develop new features;
  • Responsible gambling: monitor usage patterns to identify signs of problem gambling and proactively trigger protection tools when needed;
  • Fulfillment of legal obligations: comply with requirements from regulatory authorities, as well as judicial or administrative decisions applicable to pop88's operations in Brazil.

Pop88 does not use your data to build betting profiles that could be exploited to artificially increase user losses. Odds are determined by market analysis, not by individual bettor profiles.

4Legal Basis for Processing (LGPD)

Pop88 processes personal data only where a valid legal basis exists, as required by the LGPD. The legal bases applied are:

  • Contract performance (Art. 7, V of the LGPD): processing is necessary to provide the services you contracted when you created your account — bet processing, payments, withdrawals, and support;
  • Compliance with a legal obligation (Art. 7, II of the LGPD): collection of CPF, identity verification and retention of financial records to comply with legal anti-money laundering obligations and industry regulations;
  • Consent (Art. 7, I of the LGPD): sending promotional communications and using non-essential cookies — you may withdraw this consent at any time without affecting core services;
  • Legitimate interest (Art. 7, IX of the LGPD): fraud prevention, Platform security, aggregated usage analysis and continuous service improvement, always respecting your rights and expectations as a user;
  • Protection of life and responsible gambling (Art. 7, VII of the LGPD): monitoring of usage patterns to proactively identify and address problem gambling situations.

Transparency on legal bases: You may request specific information from pop88 about the legal basis that justifies each type of data processing carried out with your information. Contact privacidade@pop88.best for more details.

5Data Sharing with Third Parties

Pop88 does not sell, rent, or trade personal data of users. Data sharing occurs only in the following situations and with the categories of third parties listed below:

  • Payment processors: payment gateways and partner financial institutions to process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED. These partners act as data processors under confidentiality agreements and have access only to the information strictly necessary to process each transaction;
  • Casino game providers: companies that provide slots, live games, and crash games integrated into pop88. They receive an anonymized user identifier to operate the games, with no access to your full personal data;
  • KYC providers: specialized identity verification services that assist in confirming CPF numbers and document authenticity, operating under strict confidentiality obligations;
  • IT Infrastructure: cloud computing and hosting providers that process data as data processors — without access to content for their own purposes — under contracts aligned with the LGPD;
  • Competent authorities: when required by law, court order, or regulation applicable to the betting sector in Brazil, pop88 shares data with public authorities. Whenever possible and permitted by law, the user will be notified of such disclosure.

All third parties that receive data from pop88 are bound by contractual confidentiality and data protection obligations compatible with the LGPD. pop88 conducts periodic compliance assessments of its partners.

We never share: Your data with advertisers, data brokers, or any company for third-party marketing purposes. If you receive communication from a third party claiming to have obtained your data from pop88, report it immediately to privacidade@pop88.best — this would indicate a breach that we will investigate with the highest priority.

6Cookies and Tracking Technologies

Pop88 uses cookies and similar technologies to ensure the Platform functions correctly, improve the user experience and, with your consent, personalize content and analyze usage. The types of cookies used are:

  • Essential cookies: required for the Platform's basic operation — session authentication, bet slip management, and security. They cannot be disabled without affecting the site's functionality;
  • Performance and analytics cookies: used to understand how users navigate the Platform — which pages are most visited, where technical errors occur, and how long sessions last. Data is aggregated and anonymized. Your consent is required;
  • Functionality cookies: allow the Platform to remember your preferences, such as language and interface settings. They improve the experience without tracking activity for external purposes. They require your consent;
  • Personalization cookies: used to deliver promotions and relevant content based on your usage history on the Platform. They apply exclusively within pop88 — they are not used to track you across other sites. Your explicit consent is required.

You can manage your cookie preferences at any time through the privacy panel in your pop88 account or through your browser settings. Disabling non-essential cookies does not affect access to the Platform's core features.

Pop88 does not use cross-site tracking technologies to monitor your browsing on other websites or platforms outside of pop88.best and the official app.

7Data Security

Pop88 implements multiple layers of security to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

  • Encryption in transit: all communications between your device and pop88's servers are protected by TLS/SSL 256-bit — the encryption standard used by major Brazilian banks;
  • Encryption at rest: sensitive data stored on pop88's servers, such as passwords and financial information, is encrypted using robust algorithms, rendering it unreadable even in the event of unauthorized physical access to the server;
  • Internal access controls: only pop88 staff members who require personal data to perform their duties have access to it, with strong authentication and an audit log of all access;
  • Two-factor authentication (2FA): available to all users — we strongly recommend enabling it for additional account protection;
  • Continuous monitoring: automated systems monitor the Platform in real time to detect suspicious activity, unauthorized access attempts, and patterns indicative of fraud;
  • Security testing: pop88 conducts regular vulnerability assessments and penetration testing to identify and address weaknesses before they can be exploited.

In the event of a security incident involving your personal data that poses a significant risk, pop88 will follow the procedures required by the LGPD: notifying the National Data Protection Authority (ANPD) and affected users within the legal timeframes, with a description of the incident, the categories of data affected, and the measures taken.

Your role in keeping things secure: Encryption protects your data in transit, but your account security starts with your password. Use a strong, unique password for pop88, enable 2FA, and never share your credentials. If you suspect unauthorized access, contact suporte@pop88.best immediately.

8Data Retention and Deletion

Pop88 retains personal data for as long as necessary to fulfill the purposes described in this Policy and meet applicable legal obligations. Retention periods are defined based on:

  • Active account data: retained for as long as your account remains active. After voluntary account closure, basic registration data is kept for up to 5 years to comply with legal obligations related to Sports Betting and financial transactions;
  • Financial transaction records: retained for 5 years after each transaction, as required by anti-money laundering legislation and Brazilian financial regulations;
  • Identity verification documents (KYC): retained for 5 years after account closure;
  • Betting records: retained for 5 years for audit, dispute resolution and regulatory compliance purposes;
  • Support communication data: retained for 2 years for service quality and dispute resolution purposes;
  • Non-essential cookie data: retained for the duration configured for each cookie, generally between 30 days and 1 year.

Once retention periods expire, data is anonymized or securely and irreversibly deleted. Anonymized data — which cannot be used to identify an individual — may be retained indefinitely for statistical and Platform improvement purposes.

You may request early deletion of your personal data, subject to legal retention limitations. See your rights in Section 9 of this Policy.

9Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD — Law 13.709/2018) grants you a set of rights over your personal data. pop88 is committed to making it easy for you to exercise those rights efficiently and without unnecessary red tape:

Right What this means in practice
Access Request a copy of all personal data pop88 holds about you, in a readable format.
Correction Request the correction of inaccurate, incomplete, or outdated data — name, address, email, etc.
Deletion Request the deletion of your data processed on the basis of consent. Data processed under a legal obligation cannot be deleted before the applicable legal retention period expires.
Objection Object to processing carried out on the basis of legitimate interest, such as promotional communications or certain types of analysis.
Portability Receive your data in a structured, machine-readable format (JSON or CSV) for portability to another controller.
Restriction Request restriction of the processing of your data in specific situations provided for under the LGPD, such as during the review of a dispute.
Information Be informed about the third parties with whom your data has been shared and the legal basis for each processing activity carried out.
Withdraw Consent Withdraw previously given consent for processing based on consent (promotional communications, non-essential cookies), without penalty.

To exercise any of these rights, please contact us at privacidade@pop88.best with the subject line "LGPD — [your full name] — [right being requested]". pop88 will respond within 15 business days, as required by the LGPD. In complex cases requiring additional time, you will be notified with a justification and the new estimated deadline.

If you are not satisfied with pop88's response, you have the right to file a complaint with the National Data Protection Authority (ANPD), the regulatory authority responsible for enforcing the LGPD in Brazil.

10Minors

Pop88 services are intended exclusively for individuals who are 18 years of age or older. The Platform does not intentionally collect, process or store personal data from users under 18.

During registration, pop88 asks for the user's date of birth and CPF, verifying that they are of legal age before completing the sign-up process. Accounts created by minors are closed immediately upon identification, regardless of how the situation came to light.

If you are a guardian of a minor: If you believe a minor under 18 has created a pop88 account using your data or the minor's data, contact suporte@pop88.best immediately. pop88 will close the account and delete all associated data with the highest priority.

11International Data Transfer

Pop88 operates infrastructure on servers located in Brazil and may use cloud service providers with servers outside the country for certain specific Platform components, such as security analysis and CDN infrastructure.

Any international transfer of personal data carried out by pop88 or its processors takes place in compliance with Articles 33 to 36 of the LGPD, ensuring that the level of protection in the destination country is equivalent to that required by Brazilian law. The mechanisms used to ensure this compliance include:

  • Transfers to countries with a level of protection recognized as adequate by the ANPD;
  • Contracts with data protection clauses aligned with LGPD and European GDPR standards;
  • Compliance certifications from international service providers.

To learn more about which international transfers are carried out and the safeguards in place, contact privacidade@pop88.best.

12Changes to this Privacy Policy

Pop88 may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or internal data protection practices. Any significant update will be communicated with a minimum advance notice of 15 days via registered email and through a prominent notice on the Platform.

The date of the last update is always shown at the top of this page and at the beginning of the introduction section. Changes that require new consent — such as the addition of new consent-based processing purposes — will be communicated with an explicit request for your confirmation before taking effect on your account.

The current version and all previous versions of this Policy are available at pop88.best/privacy-policy. To request access to a specific earlier version, email privacidade@pop88.best.

13Contact the Data Protection Officer (DPO)

Pop88 has appointed a Data Protection Officer (DPO) as required by the LGPD, to serve as a communication channel between users, the Company and the National Data Protection Authority (ANPD).

For any questions related to privacy, data protection or the exercise of rights under the LGPD, please contact the pop88 DPO:

  • Dedicated email: privacidade@pop88.best
  • Recommended subject: LGPD — [your full name] — [description of request]
  • Support hours: Monday through Friday, 9 AM to 6 PM (Brasília time)
  • Response time: up to 15 business days for requests related to rights under the LGPD
  • Language: Brazilian Portuguese only

For general questions about your account, withdrawals, bets, or any other matter not specifically related to data protection, please use our standard support channel at suporte@pop88.best — available 24 hours a day, 7 days a week.

Questions about this Policy? Our privacy team can explain any part of this document in plain language. Reach us at privacidade@pop88.best before creating your account if you have any questions about how your data will be handled at pop88.

How pop88 Protects Your Privacy in Practice

Beyond the legal text — the concrete measures that keep your data secure

🔒

256-bit SSL Encryption

All communication between your phone or computer and pop88's servers is protected by 256-bit SSL encryption — the same security standard used by Brazil's major banks. When you make a deposit via Pix, place a bet on the Brasileirão, or check your balance, that data travels encrypted and cannot be intercepted by third parties.

🚫

Data Is Never Sold

Pop88 does not sell, rent, or share your data with advertisers, data brokers, or any third party for marketing purposes. Your CPF, phone number, betting history, and financial data stay within the Platform, used solely to operate the services you contracted. This is not a vague promise — it is written into the contracts with all of pop88's partners.

⚖️

Full LGPD Compliance

Pop88 operates in compliance with Brazil's General Data Protection Law (LGPD — Law 13.709/2018). This means you have legal rights over your data: to access, correct, delete, port, and object to its processing. pop88's DPO is available to handle these requests within the legal timeframes, without unnecessary red tape.

🍪

Cookies Under Your Control

Pop88 uses essential cookies for Platform functionality and optional cookies for analytics and personalization — all with your consent. You can manage or withdraw that consent at any time through your account's privacy dashboard, without affecting your access to betting, withdrawals or any core pop88 feature.

🗑️

Guaranteed Data Deletion

Closed your account? pop88 retains only the data required by law (financial records for 5 years, as required by regulation) and securely and irreversibly deletes everything else. Non-essential cookie data is erased well before that. You may request early deletion of data not covered by legal obligations at any time by emailing privacidade@pop88.best.

🔔

Incident Notification

If a security incident involves your personal data, pop88 will follow LGPD procedures: notifying the ANPD and affected users within the legal timeframes, with a clear description of what happened, which data was affected, and what steps were taken. Full transparency even in difficult situations — because that is what genuine respect for users demands.

Frequently Asked Questions — Privacy at pop88

The most common questions about how your data is handled on the Platform

Yes — pop88 keeps a complete betting history for your account for service operation purposes (result calculation, payment processing), dispute resolution, regulatory auditing, and fraud prevention. This history is retained for 5 years in accordance with legal requirements applicable to the betting sector in Brazil. You also have access to your full history through your account dashboard at any time. pop88 team members may access this history only when necessary to handle your support request or carry out security checks — with access controls and an audit log recorded for every query.

The CPF is mandatory on pop88 for three main reasons: (1) to verify that you are a resident of Brazil and are 18 or older — the platform operates exclusively for the Brazilian adult public; (2) to ensure each person has only one active account, preventing fraud and bonus abuse; (3) to fulfill the customer identification obligations required by Brazilian betting regulations and anti-money laundering legislation. Your CPF is stored in encrypted form and is never shared with third parties for marketing purposes or any purpose beyond those stated. You may request deletion of your CPF from our systems after account closure and once the applicable legal retention periods have been met.

pop88 sends two types of email: (1) transactional emails — such as deposit confirmations, withdrawal notifications, and security alerts — which are necessary for account operation and cannot be disabled without compromising account security; and (2) promotional emails — featuring offers, Brasileirão promotions, new games, and Platform updates — which are only sent with your explicit consent. To unsubscribe from promotional emails, click "Unsubscribe" in the footer of any pop88 promotional email, or adjust your communication preferences in your account dashboard under "Settings > Notifications". The change takes effect immediately and you will continue to receive essential transactional emails as normal.

No. pop88 does not store full credit or debit card numbers on its servers. When you make a deposit by card, your data is processed directly by our partner payment gateway, which is certified to the highest security standards in the financial industry. pop88 receives only a transaction confirmation, with no access to your full card details. For the Pix key used for withdrawals, we store only the key itself (CPF, email, phone number, or random key) linked to your account, which is necessary to process requested withdrawals. This information is stored encrypted and is used solely to send your withdrawals.

To exercise your right of access under the LGPD and receive a full copy of your personal data held by pop88, send an email to privacidade@pop88.best with the subject line "LGPD — [your full name] — Data Access Request". Include your CPF and the email address registered to your account in the body of the email for identity verification. pop88 will respond within 15 business days with a file containing your personal data in a structured format — including registration data, transaction history, and betting history. The response will be sent to the email address registered to your pop88 account as an additional security measure.

No. pop88's odds are determined by market analysis models based on the sporting events themselves — recent team performance, match conditions, the broader betting market, and historical statistical data — not on individual bettor profiles. Your account's betting history is used to: (1) process your results and payouts, (2) identify patterns of bonus abuse or fraud, and (3) monitor signs of problem gambling as part of our responsible gaming policy. pop88's interest lies in keeping users satisfied and engaged over the long term — not in creating artificially unfavorable conditions that drive bettors away from the platform.

Your Data Protected — Bet with Peace of Mind

SSL 256-bit, LGPD compliance, and zero data selling — pop88 takes your privacy seriously

Create your account securely, deposit via Pix from R$ 20.00, and bet on Brasileirão, MMA, e-sports, and live casino knowing your personal data is handled with responsibility and transparency.

SSL 256-bit LGPD Pix accepted Bonus up to R$ 500.00 +18 years

+18 | Subject to terms and conditions | pop88.best | Brazil residents only

Responsible Gambling: Betting is entertainment — not a guaranteed source of income. Set your limits in your pop88 account and only bet what you can afford to lose. If you need help, visit Responsible Gambling. Prohibited for users under 18.

+18 | Bet Responsibly
Português